STRENGTHENING COOPERATION ON CYBER SECURITY WITHIN THE ASEAN REGION

1. STRENGTHENING COOPERATION ON CYBER SECURITY WITHIN THE ASEAN REGION The 4th ARF Seminar on Cyber Terrorism Busan, Korea, 16 – 19 October 2007 The ASEAN Secretariat

2. ARF Cooperation on Cyber Security • First ARF Seminar on Cyber Terrorism, Jeju Island, October 2004 • Second ARF Seminar on Cyber Terrorism, Cebu City, the Philippines, October 2005 • Third ARF Workshop on Cyber Security, New Delhi, September 2006 • Fourth ARF Seminar on Cyber Terrorism, Busan, October 2007

3. Previous recommendations • Promote International and Inter-agency’s information sharing and cross-sectoral measures/activities • Networking and dialogue (contact person, web based, mailing list, phone/fax, etc.) • Working on and sharing guiding principles/ reference paper, best practices, case studies, technologies and solutions, etc. • Public-Private Partnership, e.g. the Social Corporate Responsibility, especially for the cross-border matters

4. ARF Statement on Cooperation in Fighting Cyber Attack and Terrorist Misuse of Cyber Space

5. Progress • ASEAN Convention on Counter-terrorism • Adopted by ASEAN Leaders in January 2007 in Cebu, the Philippines • The Convention includes Cyber-Terrorism in the areas of cooperation • ASEAN Focal Points for CERTs • ARF is working on the List of Contact Points • Network of Technical (Expert) Group • ASEAN WG on Information Infrastructure • Working on technical cooperation on N-SOC, Network Monitoring Centre • Capacity and confidence building activities

6. Work in Progress • Compilation of the national legislation on cyber terrorism (cyber security issues) • Mechanism for regional cooperation to combat cyber terrorism • ARF Centre on Counter Cyber-terrorism

7. ASEAN Cooperation in Policy and Regulation on Network and Information Security

8. Cooperation in Policy • ASEAN Telecommunications and IT Ministers and Senior Officials Meetings (TELMIN/ TELSOM) • Platform for cooperation initiatives amongst ASEAN Member Countries, Dialogue Partners/industries to further enhance the progress, readiness, and awareness of, amongst others, network and information security • TELSOM Working Group on Information Infrastructure • Technical knowledge and current challenges relating to the network and information security and available solutions • Operational activities and policy implementation

9. Achievement • Adoption of suitable international standards (e.g., telecommunications and cyber-security standards) • Put in place minimum performance guidelines for setting up National CERT • Put in place guidelines for implementation of CERT cooperation in ASEAN • Cooperation on Cyber-security skills • Encourage the development of National Security Operation Centre (N-SOC) and/or cooperation of the Network Monitoring Centre to proactively manage, monitor and facilitate cross border information sharing

10. Cooperation in Regulation • ASEAN Telecommunication Regulators Council (ATRC) • 2005 Framework on Cooperation of Network Security • ATRC Action Plan • ATRC Working Group on Network Security • Evaluation of preparedness and right to enforce against any network abuse • Establishment of an ASEAN liaison network • ASEAN-wide user education and awareness raising programs, technical solutions, periodic assessment, and • ATRC Internet Access Service Provider (IASP) Forum • International and regional cooperation

11. Multiplatform Cooperation • ASEAN+ Dialogue Partners: • CERT Incident Drills with Dialogue Partners • An expanded exercise from the ASEAN-wide CID in 2006 • The ASEAN + DPs CID on 16 July 2007 (ASEAN, China, Japan, Korea, India and Norway) • Capacity Building • Workshops, seminars and training courses and technical visits (China, Korea, Japan, and India) • ASEAN helps ASEAN • ASEAN+ other Organizations: • ASEAN+ APEC Workshop on Network Security at TEL 35, Manila - The Philippines, 24 April 2007 • Cooperation with ITU/APT • ASEAN+ Industry (MS, IBM, etc)

12. Multiplatform Cooperation • ASEAN+ China: • Emergency Response Contact Mechanism by end of 2007 • 1st CERTS Incidents Drill in 2007 (or 2008) • Coordination Framework for Network and Information Security Emergency Responses • China to join the ATRC Network Security Liaison Network (Point of Contacts) • ASEAN+ Japan: • a high-level meeting on ICT security issues in 2008 • ASEAN+ EU: • Propose a Workshop to discuss and exchange views on the EU Cyber-crime Convention.

13. Disaster Relief Communications • A regional proposal on common frequency for disaster relief communications in ASEAN Region • ATRC is working on common frequencies for disaster relief • ATRC will consider to propose and/or submit the proposal on a common set of frequencies for ASEAN Telecoms and IT Ministers (TELMIN) to further consider and/or adopt

14. Future Work Program

15. Course of Actions • Conduct the Seminar on Cyber Terrorism on regular basis • Exchange of views and knowledge on regulations, cyber laws, and ICT Security Masterplan (Roadmap) • Establishment of the National Cyber Security Agency (NISA, KISA) • Complete the List of Focal Points of the ARF National Cyber Security Agencies • Further collaborate/cooperate within ARF Members and with other Int’l Organizations • Conduct technical training on technology and solutions for counter-measures • Sharing experience, model and benefit of the Public-Private Partnership (Gov’t-Business Forum on Cyber Security)

16. Contact Points ARF Unit: Mr. Pratap Parameswaran: pratap@aseansec.org Ms. Retno Astrini: retno.astrini@aseansec.org ICT Unit: Mr. Nguyen Ky Anh: kyanh@aseansec.org

17. Thank you